YPYogeshwar Peelainexploitnotes.hashnode.dev·2d ago · 10 min readTryHackMe - Olympus WriteupSummary Olympus is a Linux box built around an old Victor CMS 1.0 install hidden under /~webmaster/. An unauthenticated SQL injection in the CMS search feature was the root of the entire chain: it dum00
JJebitokinsharonjebitok.com·3d ago · 13 min readLinux Privilege Escalation: AutomationLink to the challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction Automation earns its keep in privilege escalation the moment you stop treating it as a replacement for manual en00
JJebitokinsharonjebitok.com·6d ago · 11 min readChallenge: Expose (TryHackMe)Challenge on TryHackme: Expose Introduction Expose is a TryHackMe room focused on the risks of leaving unnecessary services running on a machine. The attack surface includes FTP, SSH, DNS, HTTP on a n00
JJebitokinsharonjebitok.com·6d ago · 8 min readChallenge: Hammer (TryHackMe)Challenge on TryHackMe: Hammer Introduction Hammer is a web-focused THM challenge that chains together several small missteps into a full authentication bypass and RCE. The box exposes a login portal 00
JJebitokinsharonjebitok.com·Aug 29 · 15 min readOperation Promotion (TryHackMe)Challenge on TryHackMe: Operation Promotion You are up for promotion at Hadron Security. Your senior lead, Mara, has handed you a solo engagement against RecruitCorp, a small recruiting firm with a pu00
SSunnyincybersecurity-learning.hashnode.dev·Aug 27 · 6 min readTryHackMe Network Services 2 Room: Comprehensive Learning Guide & Deep DiveIntroduction I recently completed the Network Services 2 room on TryHackMe as part of my ongoing cybersecurity learning journey. While foundational network security focuses on standard web traffic and00
SSunnyincybersecurity-learning.hashnode.dev·Aug 26 · 10 min readTryHackMe Broken Access Control Room: Comprehensive Learning Guide & Deep DiveIntroduction I recently completed the Broken Access Control room on TryHackMe as part of my ongoing cybersecurity learning journey. Consistently ranked as the #1 vulnerability in the OWASP Top 10, Bro00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 25 · 11 min readHackSmarter - Casino WriteupSummary Casino is a Flask-based "Guest WiFi & Portal" resort captive portal. A leaked JS source-map exposes an unauthenticated internal API endpoint (/api/v1/rooms/status) that dumps the entire guest 00
SSunnyincybersecurity-learning.hashnode.dev·Aug 25 · 6 min readTryHackMe Blaster Beginner-Friendly Learning GuideIntroduction I recently completed the Blaster room on TryHackMe as part of my ongoing cybersecurity learning journey. Unlike purely theoretical or network-level rooms, Blaster offers a complete hands-00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 24 · 9 min readTryHackMe : Umbrella WriteupIntroduction Umbrella is a medium-difficulty TryHackMe box built around a leaky Docker registry, an exposed Node.js time-tracking application, and a classic writable-log privilege escalation. The path00
